$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa File: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (raw, json) Hash identifier: gL8t918642TSgoj6H9CC0WHk6cwPGpPaRmhJqHE1Lzk= Subject key identifier: 90:A6:5F:E4:70:CF:66:FC:B0:08:A6:62:CC:E9:BC:2B:6A:1E:6E:25 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584EC372B173BD3F98F88B0B6D80 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 22641 IP address blocks: 216.169.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:b1:73:bd:3f:98:f8:8b:0b:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=e78dba42-602c-4949-b85b-86cc0f69f441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:f5:da:64:25:a5:b5:2a:e7:46:db:11:7c: d1:92:a0:17:f1:21:7a:e4:9e:5d:e8:27:25:8d:d9: c3:8a:a9:d6:eb:2f:78:a7:f1:72:df:d9:fa:c4:d8: 2a:93:04:1b:42:d1:60:53:4d:12:8c:14:6e:16:9c: 0c:11:fa:21:c4:a4:0d:d2:14:ab:a7:01:ca:d7:79: 06:6b:c3:76:ce:56:24:f8:a0:ad:51:56:f3:5c:87: 87:f6:a9:1f:17:99:4e:03:82:02:4a:25:ce:53:7d: 14:a9:eb:76:12:2b:7c:cf:72:ef:58:f4:a5:de:35: 50:3e:0d:ce:d0:37:54:33:aa:be:7b:e1:d0:05:5e: c5:5c:1c:5d:4f:e0:df:87:9e:67:4f:0b:59:06:e5: e6:f5:28:27:c5:05:30:dd:12:19:4c:c1:3a:c2:5e: ec:c1:c3:ba:0c:14:ec:53:37:4b:b1:d8:75:b1:02: aa:15:48:89:00:a7:b7:86:14:aa:59:da:7e:ae:0d: 27:10:95:2b:88:fc:36:00:e7:05:22:3c:d3:99:9d: 06:1d:b1:da:12:6d:3b:ea:31:a4:1f:94:5a:00:30: f1:5a:05:47:f9:b6:fe:13:ba:62:8d:24:03:90:ac: 2f:4a:43:51:f9:d3:74:95:b2:2a:7f:c8:47:89:59: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:5F:E4:70:CF:66:FC:B0:08:A6:62:CC:E9:BC:2B:6A:1E:6E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:95:e8:8e:d6:1c:4e:ec:07:09:e3:dc:85:36:51:08:27:53: 13:6f:aa:bf:fb:22:ca:f2:ee:dc:bd:dd:bb:e4:7c:95:4d:3a: 16:07:b5:91:70:40:1a:1a:16:14:11:47:ae:ce:d9:ba:43:d0: d9:50:ed:6e:14:6f:09:fe:1a:36:40:a2:75:2f:31:94:55:1b: 4b:f4:7c:24:bf:f6:43:cd:14:41:41:77:45:db:a1:7e:bb:dd: f0:a5:7f:2d:7f:18:62:45:b8:f0:ba:f0:ef:df:c3:59:8a:2f: 13:d5:e7:f2:ff:a7:da:7a:66:3a:1d:b8:34:5c:83:fd:0d:d5: 0b:20:84:54:b1:10:70:6f:db:c2:d8:a1:c3:c8:c1:47:c7:e0: 4e:d8:7b:bc:10:3b:30:b0:f5:2e:83:49:86:b5:aa:81:b2:eb: 23:fb:5d:dd:5d:1a:25:0c:0d:14:4a:32:2a:11:c3:0b:cf:fb: 55:b6:cb:c6:40:aa:7f:bc:56:52:7a:d2:ad:9f:d7:f9:24:e4: 04:04:06:78:ba:92:70:63:19:22:f6:fd:7d:2a:92:f7:75:cc: 6e:77:ed:f3:61:1f:36:e2:d9:84:64:33:46:5c:56:14:af:1f: 66:c0:9f:d5:dc:19:49:1f:b0:22:57:89:db:d5:55:68:33:4e: 42:0d:41:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcrFzvT+Y+IsLbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTc4ZGJhNDItNjAyYy00OTQ5LWI4NWItODZjYzBmNjlmNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0D12mQlpbUq50bbEXzRkqAX8SF65J5d6Ccl jdnDiqnW6y94p/Fy39n6xNgqkwQbQtFgU00SjBRuFpwMEfohxKQN0hSrpwHK13kG a8N2zlYk+KCtUVbzXIeH9qkfF5lOA4ICSiXOU30Uqet2Eit8z3LvWPSl3jVQPg3O 0DdUM6q+e+HQBV7FXBxdT+Dfh55nTwtZBuXm9SgnxQUw3RIZTME6wl7swcO6DBTs UzdLsdh1sQKqFUiJAKe3hhSqWdp+rg0nEJUriPw2AOcFIjzTmZ0GHbHaEm076jGk H5RaADDxWgVH+bb+E7pijSQDkKwvSkNR+dN0lbIqf8hHiVn/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCmX+Rwz2b8sAimYszpvCtqHm4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGM2NDkxMTUtNzQyYi0z MmJjLWFhMTctYWE0ZjU1ZWMzMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiV6I7WHE7sBwnj3IU2UQgnUxNvqr/7Isry7ty93bvkfJVNOhYHtZFw QBoaFhQRR67O2bpD0NlQ7W4Ubwn+GjZAonUvMZRVG0v0fCS/9kPNFEFBd0XboX67 3fClfy1/GGJFuPC68O/fw1mKLxPV5/L/p9p6ZjoduDRcg/0N1QsghFSxEHBv28LY ocPIwUfH4E7Ye7wQOzCw9S6DSYa1qoGy6yP7Xd1dGiUMDRRKMioRwwvP+1W2y8ZA qn+8VlJ60q2f1/kk5AQEBni6knBjGSL2/X0qkvd1zG537fNhHzbi2YRkM0ZcVhSv H2bAn9XcGUkfsCJXidvVVWgzTkINQYs= -----END CERTIFICATE-----Generated at Fri Aug 21 02:50:08 2026 by rpki-client